$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b568c29d-087a-3c53-a220-55c7cd3f1705.roa File: b568c29d-087a-3c53-a220-55c7cd3f1705.roa (raw, json) Hash identifier: oKfaXJwLaRgJT1WJDDodSIaBpwFz7zlNzx27YD5rQrw= Subject key identifier: CD:03:44:49:A8:E7:91:DE:12:F5:42:41:48:72:A7:D2:1D:EB:07:D5 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F979DBC0C49B9907AC4E8B880 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b568c29d-087a-3c53-a220-55c7cd3f1705.roa Signing time: Fri 23 Oct 2026 01:00:12 +0000 ROA not before: Fri 23 Oct 2026 01:00:12 +0000 ROA not after: Thu 21 Jan 2027 02:00:12 +0000 asID: 33616 IP address blocks: 38.135.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:97:9d:bc:0c:49:b9:90:7a:c4:e8:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 23 01:00:12 2026 GMT Not After : Jan 21 02:00:12 2027 GMT Subject: CN=9d91c5ac-1046-4267-b3e7-d95df1d28414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8e:fb:3f:dc:29:1c:3b:45:f5:54:fa:5d:b7: 01:a5:e6:6d:60:2c:cc:14:70:65:40:8a:85:2c:bc: 26:d6:27:b3:45:48:2c:e7:7e:30:26:de:98:fc:85: dd:96:da:10:44:f7:63:2a:68:de:16:b5:06:bd:18: a4:a2:be:9d:ee:b8:b7:54:3c:0e:d8:16:98:39:5d: e7:84:3a:30:66:9c:04:7f:60:0d:2c:73:fe:69:ce: 4c:66:ed:83:13:55:d3:29:6f:aa:d5:a0:2c:ce:d2: e0:30:11:83:1d:c0:e3:12:67:6d:4f:47:d7:13:b2: be:c0:4f:7f:a0:d6:31:25:07:25:87:c9:45:a1:3e: 48:18:80:a6:2d:a7:2d:05:30:a5:ee:a2:78:1c:6a: 05:58:41:42:34:d3:b1:e9:78:8c:1f:6b:32:94:d0: 3d:0c:e2:23:2a:9f:13:ac:3d:23:97:41:ae:e5:89: 9e:b9:80:ca:35:35:83:49:b3:1b:57:0f:8d:f9:a7: 35:63:85:5e:d4:3d:c3:6d:41:ad:ea:49:49:7e:c3: c4:6f:d6:fc:69:47:55:94:ea:4f:09:f5:fb:46:f9: 84:2a:75:a0:83:b3:17:8b:12:32:4c:82:68:52:01: d1:44:c9:6d:b8:8b:a0:85:f3:ed:6e:25:b4:aa:7a: 25:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:03:44:49:A8:E7:91:DE:12:F5:42:41:48:72:A7:D2:1D:EB:07:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b568c29d-087a-3c53-a220-55c7cd3f1705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.135.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:f1:ca:b0:a2:3c:b3:40:ed:cc:b7:ef:e0:67:bd:b3:cd:ce: 99:13:7f:9a:2e:39:6c:e7:7d:cf:97:86:92:53:86:1d:14:2c: 32:1b:64:f2:dc:a8:35:74:81:06:5d:ac:98:0e:65:e2:0e:80: eb:d5:f6:27:28:ee:41:58:39:fe:de:72:27:38:7a:87:f4:5f: 1b:88:29:47:43:b0:fd:92:d1:0c:55:63:82:18:70:1e:a4:72: ca:fa:7e:db:a3:c0:ca:ac:3f:cd:67:ba:a6:d3:e4:34:a3:4a: 66:5d:31:6d:2a:64:2e:92:01:3d:d6:1f:e8:45:aa:eb:a5:9f: 7b:36:be:b5:b7:4a:fc:9e:94:fb:9d:d7:54:23:87:3c:78:aa: 46:7c:56:39:75:f7:39:fe:f7:e2:5b:f7:89:5a:70:22:7b:00: bd:ac:18:b6:dd:7d:55:05:80:36:42:94:e1:0d:4e:4c:91:6e: d3:1c:c0:7e:98:5c:6a:de:ce:59:a7:a5:f1:de:ff:02:10:8c: f1:f7:c9:97:3a:e3:a6:53:11:ff:d1:68:39:37:b8:96:cc:9f: cd:9a:c6:b1:e8:b0:6c:9b:d6:ea:85:c8:91:bd:13:50:25:a5: 0c:70:94:1b:28:57:c9:11:e1:a4:75:60:5d:66:bb:df:f4:0e: 4b:69:d8:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+XnbwMSbmQesTouIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyMzAxMDAxMloXDTI3MDEyMTAyMDAxMlowLzEtMCsGA1UEAxMk OWQ5MWM1YWMtMTA0Ni00MjY3LWIzZTctZDk1ZGYxZDI4NDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI77P9wpHDtF9VT6XbcBpeZtYCzMFHBlQIqF LLwm1iezRUgs534wJt6Y/IXdltoQRPdjKmjeFrUGvRikor6d7ri3VDwO2BaYOV3n hDowZpwEf2ANLHP+ac5MZu2DE1XTKW+q1aAsztLgMBGDHcDjEmdtT0fXE7K+wE9/ oNYxJQclh8lFoT5IGICmLactBTCl7qJ4HGoFWEFCNNOx6XiMH2sylNA9DOIjKp8T rD0jl0Gu5YmeuYDKNTWDSbMbVw+N+ac1Y4Ve1D3DbUGt6klJfsPEb9b8aUdVlOpP CfX7RvmEKnWgg7MXixIyTIJoUgHRRMltuIughfPtbiW0qnolUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0DREmo55HeEvVCQUhyp9Id6wfVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjU2OGMyOWQtMDg3YS0z YzUzLWEyMjAtNTVjN2NkM2YxNzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJoeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbxyrCiPLNA7cy37+BnvbPNzpkTf5ouOWznfc+XhpJThh0ULDIbZPLc qDV0gQZdrJgOZeIOgOvV9ico7kFYOf7ecic4eof0XxuIKUdDsP2S0QxVY4IYcB6k csr6ftujwMqsP81nuqbT5DSjSmZdMW0qZC6SAT3WH+hFquuln3s2vrW3SvyelPud 11Qjhzx4qkZ8Vjl19zn+9+Jb94lacCJ7AL2sGLbdfVUFgDZClOENTkyRbtMcwH6Y XGrezlmnpfHe/wIQjPH3yZc646ZTEf/RaDk3uJbMn82axrHosGyb1uqFyJG9E1Al pQxwlBsoV8kR4aR1YF1mu9/0Dktp2Is= -----END CERTIFICATE-----Generated at Tue Oct 27 15:16:01 2026 by rpki-client